Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KNLvNBrFC5Pk9AmbiOqopSR2vIk.roa
File: KNLvNBrFC5Pk9AmbiOqopSR2vIk.roa (raw, json)
Hash identifier: n1pKD7K23Mzq7YT/Cxdxc9EJcwnNmmF0hpjM5Cimgp8=
Subject key identifier: 28:D2:EF:34:1A:C5:0B:93:E4:F4:09:9B:88:EA:A8:A5:24:76:BC:89
Certificate issuer: /CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Certificate serial: 05EF7570
Authority key identifier: 28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KNLvNBrFC5Pk9AmbiOqopSR2vIk.roa
Signing time: Sat 01 Jan 2022 14:05:19 +0000
ROA not before: Sat 01 Jan 2022 14:05:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207578
IP address blocks: 185.187.44.0/23 maxlen: 23
193.25.203.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 99579248 (0x5ef7570)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28208ba4e75e27b046f9e5278221b44778b6ae8d
Validity
Not Before: Jan 1 14:05:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=28d2ef341ac50b93e4f4099b88eaa8a52476bc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:91:d8:65:0c:4a:69:8e:0a:e0:c6:a3:a0:
d6:05:99:98:45:c0:27:a4:8b:7f:75:5a:6e:b3:75:
ba:d8:0f:1e:04:2e:2a:05:e4:ab:e0:d5:55:ee:5e:
eb:bf:70:8e:1d:bf:73:bb:fc:5f:0e:0a:95:63:f1:
f9:b2:a8:f4:a6:15:b7:ad:e8:94:8a:76:bc:7d:6c:
fe:0f:29:b2:9e:aa:93:7a:e4:dd:36:04:c7:89:fc:
97:f7:7c:4a:e3:cc:b3:2d:a8:bd:2f:6e:34:a7:93:
6c:e8:41:e4:14:28:f2:f8:8b:95:42:c6:3a:4f:31:
dc:d5:98:a7:96:73:a9:8b:53:ff:ed:fd:6f:72:05:
a0:93:65:97:74:57:6b:0f:bd:38:03:0e:fd:8c:79:
54:83:c1:02:51:5c:20:64:cf:b7:ee:8d:38:10:60:
f1:3e:1c:cf:20:94:cc:07:9f:38:69:d9:42:2a:e2:
f8:e2:bb:91:4e:8f:91:22:01:ff:75:ca:c9:ae:02:
a6:f5:fb:40:4a:fc:73:26:87:75:98:c9:96:93:ed:
07:65:d7:49:33:02:ca:cb:fc:db:60:62:6c:fc:52:
20:4e:ed:67:47:ee:df:42:7a:6a:ac:c9:6e:4e:9d:
01:3d:1a:7e:c4:18:ae:c0:0f:b2:dc:c3:7c:b0:d4:
00:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:D2:EF:34:1A:C5:0B:93:E4:F4:09:9B:88:EA:A8:A5:24:76:BC:89
X509v3 Authority Key Identifier:
keyid:28:20:8B:A4:E7:5E:27:B0:46:F9:E5:27:82:21:B4:47:78:B6:AE:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KCCLpOdeJ7BG-eUngiG0R3i2ro0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KNLvNBrFC5Pk9AmbiOqopSR2vIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/02cc02-bfd9-4070-a31d-b7cd9b3b2e4f/1/KCCLpOdeJ7BG-eUngiG0R3i2ro0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.44.0/23
193.25.203.0/24
Signature Algorithm: sha256WithRSAEncryption
72:60:38:71:61:bc:5c:9f:ca:37:9d:23:3d:be:eb:bd:3e:8f:
53:19:14:61:b7:0b:6f:5f:62:97:23:fe:eb:d0:32:f0:b4:07:
b9:c6:45:ca:ec:79:aa:94:e6:b4:c2:ec:51:0b:db:73:79:74:
b9:10:dd:71:bb:d4:5e:49:d9:74:a7:5a:37:af:19:da:4f:ba:
41:51:08:a5:68:a8:2b:14:f3:0d:e1:fe:8d:d2:71:39:81:96:
e0:c0:97:10:6e:c0:3e:57:70:f2:24:98:f0:11:23:43:34:6e:
ba:6b:53:2f:59:64:2b:42:80:fe:a5:70:20:1d:cb:3c:2d:21:
28:68:05:21:f8:13:7a:f3:d0:20:f7:42:ba:60:83:77:26:d7:
80:7c:e5:ef:dd:81:4e:ce:8c:43:97:e7:1d:cb:57:6e:e9:73:
87:97:d6:4e:fa:ec:9d:e3:95:b6:1c:49:41:ab:26:a1:38:ad:
25:b1:c7:88:4d:05:79:ca:74:5b:fd:c2:65:ce:06:f2:15:1d:
28:c9:bb:21:cd:7f:bf:dc:06:45:40:a0:19:84:cc:85:72:64:
81:27:2f:c8:5c:c7:ea:c4:c5:e2:9f:e6:5e:0c:ac:37:6f:1b:
37:c7:b5:da:79:fe:f2:b4:1f:2d:83:57:61:84:3b:51:8f:8b:
c7:53:c7:cc
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEBe91cDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygy
ODIwOGJhNGU3NWUyN2IwNDZmOWU1Mjc4MjIxYjQ0Nzc4YjZhZThkMB4XDTIyMDEw
MTE0MDUxOVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoMjhkMmVmMzQxYWM1
MGI5M2U0ZjQwOTliODhlYWE4YTUyNDc2YmM4OTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAI05kdhlDEppjgrgxqOg1gWZmEXAJ6SLf3VabrN1utgPHgQu
KgXkq+DVVe5e679wjh2/c7v8Xw4KlWPx+bKo9KYVt63olIp2vH1s/g8psp6qk3rk
3TYEx4n8l/d8SuPMsy2ovS9uNKeTbOhB5BQo8viLlULGOk8x3NWYp5ZzqYtT/+39
b3IFoJNll3RXaw+9OAMO/Yx5VIPBAlFcIGTPt+6NOBBg8T4czyCUzAefOGnZQiri
+OK7kU6PkSIB/3XKya4CpvX7QEr8cyaHdZjJlpPtB2XXSTMCysv822BibPxSIE7t
Z0fu30J6aqzJbk6dAT0afsQYrsAPstzDfLDUAKECAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBQo0u80GsULk+T0CZuI6qilJHa8iTAfBgNVHSMEGDAWgBQoIIuk514nsEb5
5SeCIbRHeLaujTAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0tDQ0xwT2RlSjdCRy1lVW5naUcwUjNpMnJvMC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNWUvMDJjYzAyLWJmZDktNDA3MC1hMzFkLWI3Y2Q5YjNiMmU0Zi8x
L0tOTHZOQnJGQzVQazlBbWJpT3FvcFNSMnZJay5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNWUv
MDJjYzAyLWJmZDktNDA3MC1hMzFkLWI3Y2Q5YjNiMmU0Zi8xL0tDQ0xwT2RlSjdC
Ry1lVW5naUcwUjNpMnJvMC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAbm7LAMEAMEZyzANBgkqhkiG9w0B
AQsFAAOCAQEAcmA4cWG8XJ/KN50jPb7rvT6PUxkUYbcLb19ilyP+69Ay8LQHucZF
yux5qpTmtMLsUQvbc3l0uRDdcbvUXknZdKdaN68Z2k+6QVEIpWioKxTzDeH+jdJx
OYGW4MCXEG7APldw8iSY8BEjQzRuumtTL1lkK0KA/qVwIB3LPC0hKGgFIfgTevPQ
IPdCumCDdybXgHzl792BTs6MQ5fnHctXbulzh5fWTvrsneOVthxJQasmoTitJbHH
iE0Fecp0W/3CZc4G8hUdKMm7Ic1/v9wGRUCgGYTMhXJkgScvyFzH6sTF4p/mXgys
N28bN8e12nn+8rQfLYNXYYQ7UY+Lx1PHzA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:28 2024 by rpki-client on console-fra.rpki-client.org